7.2.2 and static nat entry

[danielkaiser]

I hope someone can help.

With the static entry the host (10.0.0.5) can't get out to the internet, without the static entry the host can get out to the internet. Any ideas why this would be happining. I'm running version 7.2.2 on a pix 515. Thanks.

nat-control

global (outside) 1 70.x.x.100-70.x.x.104 netmask 255.255.255.240

global (dmz) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

static (inside,outside) 70.x.x.105 10.0.0.105 netmask 255.255.255.255

[Aaron S Mcquaid]

What may be going on here is that the .105 address is falling within the 70.x.x.96/28 range. Try using a global address that falls outside this range for your static or use a /29 on the global and make sure that the ranges don't overlap.